put sessions in db

api/auth.go

@@ -71,24 +71,47 @@ func Logout(w http.ResponseWriter, r *http.Request) {
 
 }
 
-var sessionStore = make(map[string]string)
+type Session struct {
+	Token    uuid.UUID
+	Username string
+}
 
 func CreateSession(username string) string {
-	sessionToken := uuid.New().String()
-	sessionStore[sessionToken] = username
-	return sessionToken
+	session := Session{
+		Token:    uuid.New(),
+		Username: username,
+	}
+	dbAddSession(&session)
+	return session.Token.String()
 }
 
 func ValidateSession(sessionToken string) (string, bool) {
-	username, exists := sessionStore[sessionToken]
-	return username, exists
+	tokenUUID, err := uuid.Parse(sessionToken)
+	if err != nil {
+		return "", false
+	}
+
+	session, err := dbGetSession(tokenUUID)
+	if err != nil {
+		return "", false
+	}
+	return session.Username, true
 }
 
 func DeleteSession(sessionToken string) (string, bool) {
-	username, exists := sessionStore[sessionToken]
+	tokenUUID, err := uuid.Parse(sessionToken)
+	if err != nil {
+		return "", false
+	}
 
-	delete(sessionStore, username)
-	return username, exists
+	session, err := dbGetSession(tokenUUID)
+	if err != nil {
+		return "", false
+	} else {
+		dbDeleteSession(session.Token)
+	}
+
+	return session.Username, true
 }
 
 type contextKey string